CVEs published July 17, 2026
291 CVEs were published on July 17, 2026: 35 critical, 97 high. 4 are now in CISA KEV.
- Published
- 291
- Critical
- 35
- High
- 97
- Medium
- 140
- Low
- 19
- Unrated
- 0
- Now in CISA KEV
- 4
- Fix available
- 197
Most affected products
- OpenClaw
- 25
- IBM Langflow OSS
- 17
- HCLSoftware Aftermarket EPC
- 14
- getgrav grav
- 7
- Red Hat build of Keycloak · Red Hat Data Grid +2
- 6
- pimcore · pimcore/pimcore
- 5
- python-zeroconf · zeroconf
- 5
- shopware · shopware/platform +1
- 5
- symfony ux · symfony/ux-live-component
- 5
- HCLSoftware DevOps Loop
- 4
Critical 35
- CVE-2026-54466websocket-driver: Message corruption via abuse of protocol length headersfaye websocket-driver-node · websocket-driver
- CVE-2026-55518Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalationavo-hq avo · avo
- CVE-2026-13446Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsIBM Langflow OSS
- CVE-2026-54159ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCEPrestaShop ps_facetedsearch · prestashop/ps_facetedsearch
- CVE-2026-48062CodeIgniter: Uploaded file extension validation bypass in `ext_in` ruleCodeIgniter4 · codeigniter4/framework
- CVE-2026-15091Multiple Vulnerabilities in IBM Engineering AI hub.IBM Engineering AI Hub
- CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code ExecutionWordPress
- CVE-2026-8476Disk Cache Deserialization Remote Code Execution VulnerabilityIBM Langflow OSS
- CVE-2026-8481Remote Code Execution via Code Validation EndpointIBM Langflow OSS
- CVE-2026-8505Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow ExecutionIBM Langflow OSS · langflow
- CVE-2026-8635Arbitrary Code Execution in Python Interpreter ComponentIBM Langflow OSS
- CVE-2026-8859Path Traversal in APIRequest Component via Content-Disposition HeaderIBM Langflow OSS
- CVE-2026-9103Unauthenticated Superuser Token Issuance via Auto-Login EndpointIBM Langflow OSS
- CVE-2026-9135Policies Component Dynamic CodeInput Fields Bypass Custom Component ValidationIBM Langflow OSS
- CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationIBM Langflow OSS
- CVE-2026-9202Unauthenticated User Registration Could Lead to Remote Code ExecutionIBM Langflow OSS
- CVE-2026-12694Missing Authorization in Vimesoft's Enterprise Video PlatformVimesoft Enterprise Video Platform
- CVE-2026-54496Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundnessZcashFoundation zebra · zcash halo2_gadgets +7
- CVE-2026-12693IDOR in Vimesoft's Enterprise Video PlatformVimesoft Enterprise Video Platform
- CVE-2026-12692Improper Authentication in Vimesoft's Enterprise Video PlatformVimesoft Enterprise Video Platform
- CVE-2026-9586Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBSangoma Switchvox SMB Edition
- CVE-2026-8297SQLi in GIS Informatics' GisLab Laboratory Management SystemGis Informatics Engineering Consulting Laboratory R&D and S…
- CVE-2026-60024Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0joomdonation.com Events Booking extension for Joomla
- CVE-2024-23564HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from thHCL Software Aftermarket EPC
- CVE-2026-9810AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuthAI Copilot
- CVE-2026-15982Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'CodeRevolution Aimogen Pro - All-in-One AI Content Writer,…
- CVE-2026-14956Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds ParameterBricksforge
- CVE-2026-62241clawvet < 0.7.5 Hard-coded JWT Secret Session ForgeryMohibShaikh clawvet
- CVE-2026-62232Grav < 2.0.4 2FA Bypass via Secret Regenerationgetgrav grav · getgrav/grav
- CVE-2025-51677An issue was discovered in openRISC OR1200 commit 83ac6b.
- CVE-2026-36669An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload
- CVE-2026-42168django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send fields on the Partner model.
- CVE-2026-51080libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.
- CVE-2026-52199An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component
- CVE-2026-52348cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
High 97
- CVE-2026-56171Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Remote Desktop Web Client · Microsoft Windows Adm…
- CVE-2026-56740JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variablesjline3 · org.jline:jline-remote-telnet
- CVE-2026-56741JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometryjline3 · org.jline:jline-remote-telnet
- CVE-2026-49485HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpointhapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +7
- CVE-2026-54498view_component: around_render HTML-Safety BypassViewComponent view_component · view_component
- CVE-2026-13445Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsIBM Langflow OSS
- CVE-2026-50271dd-trace-py: Improper parsing of W3C baggage headers may lead to DoSDataDog dd-trace-py · ddtrace
- CVE-2026-50274dd-trace-go: Improper parsing of W3C baggage headers may lead to DoSDataDog dd-trace-go · github.com/DataDog/dd-trace-go +1
- CVE-2026-53727css_parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`premailer css_parser · css_parser
- CVE-2026-50272dd-trace: Improper parsing of W3C baggage headers may lead to DoSDataDog dd-trace-js · dd-trace
- CVE-2026-44891Netty: Denial of Service via Unbounded Headers in StompSubframeDecodernetty · io.netty:netty-codec-stomp
- CVE-2026-44974Parameter smuggling in @hapi/content header parser allows upload-filter bypass via duplicate parametershapijs content · @hapi/content
- CVE-2026-13448Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsIBM Langflow OSS
- CVE-2026-13473IBM Storage Protect Client is vulnerable to Heap-Based Buffer OverflowIBM Storage Protect Client
- CVE-2026-14499Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsIBM Langflow OSS
- CVE-2026-45799Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding servicesquare wire · com.squareup.wire:wire-runtime-jvm +1
- CVE-2026-16118Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.cxdgmime · Red Hat Enterprise Linux +5
- CVE-2026-50289systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linuxsebhildebrandt systeminformation · systeminformation
- CVE-2026-50151oras-go: credential forwarding via unvalidated Location header in blob uploadoras-project oras-go · oras.land/oras-go/v2
- CVE-2026-50163oras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extractionoras-project oras-go · oras.land/oras-go/v2
- CVE-2026-15322Multiple Vulnerabilities in IBM Engineering AI hub.IBM Engineering AI Hub
- CVE-2026-48373Acrobat Reader | Heap-based Buffer Overflow (CWE-122)Adobe Acrobat DC · Adobe Acrobat Reader DC +1
- CVE-2026-50197Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requestszalando skipper · github.com/zalando/skipper
- CVE-2026-7667Path Traversal Vulnerability in API Request Component Content-Disposition Header ProcessingIBM Langflow OSS
- CVE-2026-7754SSRF Protection Configuration VulnerabilityIBM Langflow OSS
- CVE-2026-7755MCP Server Configuration Validator Bypass via File Upload APIIBM Langflow OSS
- CVE-2026-49284SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`simplesamlphp · simplesamlphp/simplesamlphp
- CVE-2026-7872Path Traversal Vulnerability in File Component Leading to Arbitrary File Read and Authentication BypassIBM Langflow OSS
- CVE-2026-49852joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)authlib joserfc · joserfc
- CVE-2026-8056Parameter Injection Vulnerability in API Graph Execution EngineIBM Langflow OSS
- CVE-2026-45704Pimcore: CustomReports Share Bypasspimcore · pimcore/pimcore
- CVE-2026-44739Pimcore: SQL Injection in Custom Reports Column Configurationpimcore · pimcore/pimcore
- CVE-2026-45260Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handlingpimcore · pimcore/pimcore
- CVE-2026-45162Pimcore: Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restrictionpimcore · pimcore/pimcore
- CVE-2026-58195Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSyncruvnet agentic-flow · agentic-flow
- CVE-2026-45309AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal usernameronf asyncssh · asyncssh
- CVE-2026-52746JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustionjsonata-js jsonata · jsonata
- CVE-2026-9171Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.IBM PowerVM Novalink
- CVE-2026-53712SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithmsongres scram · com.ongres.scram:scram-client +1
- CVE-2026-50273Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoSDataDog dd-trace-dotnet · Datadog.Trace +1
- CVE-2026-9762IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user controlIBM Db2
- CVE-2026-12691Authentication Bypass in Vimesoft's Enterprise Video PlatformVimesoft Enterprise Video Platform
- CVE-2026-57860ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repositorytailcallhq forgecode
- CVE-2026-63307Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasourceOtterMind Chat2DB
- CVE-2026-9588Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web PortalSangoma Switchvox SMB Edition
- CVE-2026-9587Authenticated Local File Inclusion (LFI) in Switchvox SMB Web PortalSangoma Switchvox SMB Edition
- CVE-2026-9585Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web PortalSangoma Switchvox SMB Edition
- CVE-2026-63101Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpointfossasia open-event-server
- CVE-2026-58148Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52chronoengine.com ChronoForms extension for Joomla
- CVE-2026-63100Maybe 0.6.0 Missing Authorization via HostingsController show/updatemaybe-finance maybe
- CVE-2026-60025Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0joomdonation.com Events Booking extension for Joomla
- CVE-2026-63099TheHive 4.1.24 Broken Object Level Authorization via Attachment Download EndpointsTheHive-Project TheHive
- CVE-2026-63095Dendrite 0.13.8 Improper Authorization via POST account/3pid/delete Endpointmatrix-org dendrite
- CVE-2026-14741HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_dateOALDERS HTTP::Date
- CVE-2026-15343Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file pathsGitHub Enterprise Server
- CVE-2026-12715Missing Authorization in Firebase Studio allows Cross-Tenant Source Code TheftGoogle Cloud Firebase Studio
- CVE-2026-14871osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosureosTicket
- CVE-2026-63093Cursor for Windows 3.2.16 RCE via Malicious git.exe in WorkspaceAnysphere Cursor
- CVE-2026-63094SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theftsignoz
- CVE-2026-9592Sensitive Information Disclosure in HTTP headerSEPPmail Secure Email Gateway & SEPPmail Cloud
- CVE-2026-7488Sensitive Data Exposure in IKAS Technologies' E-CommerceIKAS Technology E-Commerce
- CVE-2026-13410Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabledGARU Dancer::Plugin::Auth::Google
- CVE-2026-7189Sensitive Data Exposure in Proliz's OBSProliz Software Ltd. Proliz's OBS
- CVE-2026-8396XXE in Netcad's NetGISNetcad Software NetGIS
- CVE-2026-59252Missing gas_limit validation in mpp Tempo fee-payer enables wallet drainZenHive mpp
- CVE-2026-59694Unbounded access list in mpp Tempo fee-payer inflates gas cost per paymentZenHive mpp
- CVE-2026-59695Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drainZenHive mpp
- CVE-2026-22104Improper access control in Hashtopolis server chunk activity componenthashtopolis server
- CVE-2019-25764**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass theASUS AURA SYNC
- CVE-2026-11961User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership IDUser Registration & Membership
- CVE-2026-11575PhonePe Payment Solutions < 3.1.0 - Unauthenticated Payment Bypass via Forged CallbackPhonePe Payment Solutions
- CVE-2026-13765LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpointsthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-13352Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 - Authenticated (Author+) Limited Unsafe File Upload via upload_mimes Filter Expansionproperfraction Paid Membership Plugin, Ecommerce, User Regi…
- CVE-2026-15395Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Valuewpchill Kali Forms — Contact Form & Drag-and-Drop Builder
- CVE-2026-62387Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugingetgrav grav
- CVE-2026-62386Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parametergetgrav grav
- CVE-2026-62238OpenRemote < 1.26.0 SQL Injection via Crosstab Exportopenremote · io.openremote:openremote-manager
- CVE-2026-62234Grav < 2.0.4 SSRF via Unrestricted cURL Protocolsgetgrav grav
- CVE-2026-62233grav-plugin-api < 1.0.6 Privilege Escalation via createApiKeygetgrav grav
- CVE-2026-62231Grav < 1.0.6 API Key Scope Bypass via ApiKeyAuthenticatorgetgrav grav
- CVE-2026-62230Grav < 2.0.4 File Access Bypass via Case Variationgetgrav grav · getgrav/grav
- CVE-2026-62229OpenClaw < 2026.5.18 Authorization Bypass via Glob MatchingOpenClaw
- CVE-2026-62228OpenClaw < 2026.6.5 Authorization Bypass via Node Exec ApprovalsOpenClaw
- CVE-2026-62223OpenClaw < 2026.5.18 Authorization Bypass via Device-pairOpenClaw
- CVE-2026-62222OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-modeOpenClaw
- CVE-2026-62218OpenClaw 2026.1.20 < 2026.5.27 Authorization Bypass via device.pair.approveOpenClaw
- CVE-2026-62217OpenClaw 2026.5.14-beta.1 < 2026.5.27 Authentication Bypass via exec approvalsOpenClaw
- CVE-2026-62209OpenClaw 2026.5.10-beta.1 < 2026.6.5 Authorization Bypass via agent-mode dispatchOpenClaw
- CVE-2026-62207OpenClaw < 2026.6.5 Authentication Bypass via Admin ToolsOpenClaw
- CVE-2026-62203OpenClaw < 2026.6.6 Environment Variable Injection via rustupOpenClaw
- CVE-2026-62202OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via CronOpenClaw
- CVE-2025-51678An issue was discovered in RISC-V PicoRV32 commit 87c89a.
- CVE-2025-60357AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint.
- CVE-2026-51082A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x b
- CVE-2026-51833Xenforo 2.3.8 is vulnerable to SSRF.
- CVE-2026-52203An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
- CVE-2026-52584Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG
Medium, low and unrated 159
- CVE-2026-57980Microsoft Edge (Chromium-based) Tampering VulnerabilityMicrosoft Edge
- CVE-2026-48049@hapi/inert: Static-file confinement bypass via sibling-prefix pathhapijs inert · @hapi/inert
- CVE-2026-48022@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirectshapijs wreck · @hapi/wreck
- CVE-2026-44979@hapi/wreck : Sensitive `Proxy-Authorization` header leaked across cross-hostname redirectshapijs wreck · @hapi/wreck
- CVE-2026-54335Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__feathersjs feathers · @feathersjs/commons
- CVE-2026-54490websocket-driver: Resource limit bypass via message compressionfaye websocket-driver-node · websocket-driver
- CVE-2026-54497view_component: Reused Component Instances Retain Stale Render ContextViewComponent view_component · view_component
- CVE-2026-45785OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycleopenmcdf
- CVE-2026-45784rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphersrust-openssl · openssl
- CVE-2026-54243Statamic: CSV formula injection in form submission exportsstatamic cms · statamic/cms
- CVE-2026-54242Statamic: Server-Side Request Forgery via Glide (DNS rebinding)statamic cms · statamic/cms
- CVE-2026-54244Statamic: Incorrect authorization lets view-only users submit Live Preview content reserved for editorsstatamic cms · statamic/cms
- CVE-2026-49977tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookiesAmauriC tarteaucitron.js · tarteaucitronjs
- CVE-2026-54163secure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted inputgithub secure_headers · secure_headers
- CVE-2026-16074AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgeryAstrBotDevs AstrBot
- CVE-2026-48504OpenTelemetry Rust: Unbounded memory allocation in W3C Baggage propagationopen-telemetry opentelemetry-rust · opentelemetry_sdk
- CVE-2026-54171Excon: redact additional sensitive/risky headers when following redirectsexcon
- CVE-2026-54465websocket-driver: Memory exhaustion in HTTP header parserfaye websocket-driver-ruby · websocket-driver
- CVE-2026-54463websocket-driver: Memory exhaustion via abuse of protocol length headersfaye websocket-driver-ruby · websocket-driver
- CVE-2026-54464websocket-driver: Resource limit bypass via message compressionfaye websocket-driver-ruby · websocket-driver
- CVE-2026-14501Use of Potentially Dangerous Functionthat in IBM Db2 Genius HubIBM Db2 Genius Hub · IBM Agentics
- CVE-2026-55254NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluationncalc · NCalc.Core +1
- CVE-2026-46420setup-php: Command Injection in Repository-Derived PHP Version Resolutionshivammathur setup-php
- CVE-2026-14971This PowerVM Novalink update is being released to addressIBM PowerVM Novalink
- CVE-2026-14979IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attackIBM Engineering Lifecycle Management
- CVE-2026-48819Hey API: `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` keyhey-api openapi-ts · @hey-api/openapi-ts
- CVE-2026-15069Multiple Vulnerabilities in IBM Engineering AI hub.IBM Engineering AI Hub
- CVE-2026-50162oras-go: file store write outside workingDir via symlink traversaloras-project oras-go · oras.land/oras-go/v2
- CVE-2026-15093Multiple Vulnerabilities in IBM Engineering AI hub.IBM Engineering AI Hub
- CVE-2026-15415Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-serveraws-healthomics-mcp-server
- CVE-2026-48978oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokensoras-project oras-go · oras.land/oras-go/v2 +1
- CVE-2026-15995IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent useIBM Cognos Analytics
- CVE-2026-4938Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-4942IBM i is Affected by Algorithm Downgrade in Transport Layer Security []IBM i
- CVE-2026-7364Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-49834sigstore-go: Multi-log threshold bypass via single compromised logsigstore-go · github.com/sigstore/sigstore-go
- CVE-2026-7771IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of serviceIBM Db2
- CVE-2026-60137WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_QueryWordPress
- CVE-2026-12283SQL injection in Amazon Athena Synapse connectoraws-athena-query-federation
- CVE-2026-8861Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-45703Pimcore: WordExport Authorization Bypass for Unauthorized Document Exportpimcore · pimcore/pimcore
- GHSA-RJWR-M7QX-3FJRoapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Codegithub.com/oapi-codegen/oapi-codegen/v2
- CVE-2026-50185RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are setRustCrypto utils · cmov
- CVE-2026-48487Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packetpython-zeroconf · zeroconf
- CVE-2026-48045Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source floodpython-zeroconf · zeroconf
- CVE-2026-47184Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast floodpython-zeroconf · zeroconf
- CVE-2026-47183Zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustionpython-zeroconf · zeroconf
- CVE-2026-47180Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of servicepython-zeroconf · zeroconf
- CVE-2026-49835Sigstore Timestamp Authority: OOM due to unbounded metric label cardinalitysigstore timestamp-authority · github.com/sigstore/times… +1
- CVE-2026-16073AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scriptingAstrBotDevs AstrBot
- CVE-2026-48009Shopware: Admin Account Takeover via User Recovery Hash Exposureshopware · shopware/platform +1
- CVE-2026-48014Shopware: Admin API ACL Bypass in Order State Transition Endpointsshopware · shopware/platform +1
- CVE-2026-48010Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accountsshopware · shopware/platform +1
- CVE-2026-48016Shopware: Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-paymentshopware · shopware/platform +1
- CVE-2026-48015Shopware: Stored XSS via SVG file upload — no SVG sanitizationshopware · shopware/core +1
- CVE-2026-48008Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypassshopware · shopware/platform +1
- CVE-2025-59866The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerabilHCLSoftware DFMPro for CATIA · HCLSoftware DFXAnalytics +1
- CVE-2026-21764Insufficient Input Validation in DevOps LoopHCLSoftware DevOps Loop
- CVE-2026-21762Missing HTTP Security Headers in DevOps LoopHCLSoftware DevOps Loop
- CVE-2026-21761CORS Misconfiguration in DevOps LoopHCLSoftware DevOps Loop
- CVE-2026-21760Unauthorized Access to Admin Functionality via Forced BrowsingHCLSoftware DevOps Loop
- CVE-2026-16104Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only adminsRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16103Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemptionRed Hat Build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16106Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child rolesRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16108Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2Red Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16093Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headersRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-44722pyzipper: Encryption bypass for small files encrypted with pyzipperdanifus pyzipper · pyzipper
- CVE-2026-49215Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelistedsymfony ux · symfony/ux-live-component
- CVE-2026-49216Symfony UX: XSS in symfony/ux-autocomplete via unescaped AJAX response datasymfony ux · symfony/ux-autocomplete
- CVE-2026-63309SurrealDB < 3.1.5 Information Disclosure via ORDER BYsurrealdb
- CVE-2026-49211Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtilsymfony ux · symfony/ux-autocomplete
- CVE-2026-63308Helm Files.Lines Denial of Service via Empty Chart Fileshelm
- CVE-2026-49208Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructorsymfony ux · symfony/ux-live-component
- CVE-2026-49210Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tagsymfony ux · symfony/ux-live-component
- CVE-2026-49212Symfony UX: LiveComponentHydrator HMAC checksum lacks component and slot bindingsymfony ux · symfony/ux-live-component
- CVE-2026-49209Symfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requestssymfony ux · symfony/ux-live-component
- CVE-2026-11763IDOR in GIS Informatics' GisLab Laboratory Management SystemGis Informatics Engineering Consulting Laboratory R&D and S…
- CVE-2026-58149Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0joomdonation.com Events Booking extension for Joomla
- CVE-2026-63098TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status EndpointTheHive-Project TheHive
- CVE-2026-63097Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposurematrix-org dendrite
- CVE-2026-63096Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpointmatrix-org dendrite
- CVE-2026-9537Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparisonJBERGER Mojo::JWT
- CVE-2026-15783Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suitesGitHub Enterprise Server
- CVE-2026-15007Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configurationGitHub Enterprise Server
- CVE-2026-12705Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update ToolKNX Update Tool · ABB KNX Update Tool
- CVE-2026-16089Keycloak-services: keycloak-services: authorization codes can be retargeted to another client sessionRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16017mosaxiv clawlet cron Chat Tool tool_cron.go remove authorizationmosaxiv clawlet
- CVE-2024-23572HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this iHCLSoftware Aftermarket EPC
- CVE-2024-23570HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulneraHCLSoftware Aftermarket EPC
- CVE-2024-23578HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this requHCLSoftware Aftermarket EPC
- CVE-2024-23569HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" headerHCLSoftware Aftermarket EPC
- CVE-2024-23577HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requesteHCLSoftware Aftermarket EPC
- CVE-2024-23574HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confHCLSoftware Aftermarket EPC
- CVE-2024-42214HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server.HCLSoftware Aftermarket EPC
- CVE-2024-23575HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processingHCLSoftware Aftermarket EPC
- CVE-2024-23571HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to whichHCLSoftware Aftermarket EPC
- CVE-2024-23573HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13.HCLSoftware Aftermarket EPC
- CVE-2026-16072Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creationRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2024-23568HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server.HCLSoftware Aftermarket EPC
- CVE-2024-23565HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password fHCLSoftware Aftermarket EPC
- CVE-2024-23566HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented.HCLSoftware Aftermarket EPC
- CVE-2026-16016poco-ai poco-claw task.py run_task server-side request forgerypoco-ai poco-claw
- CVE-2024-23567HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL paraHCLSoftware Aftermarket EPC
- CVE-2026-16015poco-ai poco-claw executor_manager API tasks.py create_task missing authenticationpoco-ai poco-claw
- CVE-2026-13082GD::SecurityImage versions through 1.75 for Perl use rand to generate secretsBURAK GD::SecurityImage
- CVE-2026-16014code-projects Hospital Bed Management System Login Form sql injectioncode-projects Hospital Bed Management System
- CVE-2026-15943Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url changeRed Hat Build of Keycloak · Red Hat Data Grid +2
- CVE-2026-16013liftoff-sr CIPster cipepath.cc deserialize_symbolic out-of-boundsliftoff-sr CIPster
- CVE-2026-16009itsourcecode Hospital Management System prescriptionorderdetail.php sql injectionitsourcecode Hospital Management System
- CVE-2026-16008sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollutionsagold json-schema-library
- CVE-2026-8075Posting a malicious markdown image crashes the Mattermost Desktop AppMattermost
- CVE-2026-9602Mattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methodsMattermost
- CVE-2026-62764Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissionsApache Software Foundation Apache Accumulo
- CVE-2026-15380Local privilege escalation in Symantec ITMSBroadcom Symantec Management Suite
- CVE-2026-9656HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Scripthubspotdev HubSpot All-In-One Marketing – Forms, Popups, Li…
- CVE-2026-15379Arbitrary File Read as SYSTEM in Symantec ITMSBroadcom Symantec IT Management Suite
- CVE-2026-13402Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template DisclosureRoyal Addons for Elementor
- CVE-2026-12393WPS Bookings for WooCommerce < 3.11.7 - Subscriber+ Arbitrary Booking Order Cancellation via IDORWPS Bookings for WooCommerce
- CVE-2026-11966User Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription HandlerUser Registration & Membership
- CVE-2026-10525NEX-Forms < 9.2.3 - Unauthenticated Stored XSS via Form SubmissionNEX-Forms
- CVE-2026-15094WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameterthimpress WP Hotel Booking
- CVE-2026-21770HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingHCLSoftware HCL Traveler for Microsoft Outlook
- CVE-2026-58317Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project.TeraTerm Project TTSSH2
- CVE-2026-60060Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm ProjecTeraTerm Project TTSSH2
- CVE-2026-41993Improper Access Control vulnerability in the Removable Media Validation function of TXOne Networks products allows a local attacker with admTXOne Networks SafePortAgent · TXOne Networks StellarProtect
- CVE-2026-15161Ninja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' ParameterSaturdayDrive Ninja Forms - Excel Export
- CVE-2026-15759ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributesthemeatelier ChatHelp – Click to Chat Button, WooCommerce C…
- CVE-2026-15349ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Company Location Creation via wp_ajax_erp-company-location AJAX Handlerwedevs ERP: Complete HR, Accounting & CRM Suite Built for W…
- CVE-2026-14503pCloud WP Backup <= 2.0.3 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Readploudapp pCloud WP Backup
- CVE-2026-15457Kirki <= 6.0.13 - Authenticated (Editor+) Path Traversal to Arbitrary Directory Deletion via 'family' Parameterthemeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-11324WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'evertec WooCommerce Placetopay Gateway Belice · evertec… +3
- CVE-2026-15159Ninja Forms - Excel Export <= 3.3.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' ParameterSaturdayDrive Ninja Forms - Excel Export
- CVE-2026-15160Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path TraversalSaturdayDrive Ninja Forms - Excel Export
- CVE-2026-8616Fense Proxy & VPN Blocker <= 3.0.1 - Missing Authorization to Unauthenticated Plugin Option/Transient Deletion via fense_bpvt_save_settings AJAX Actiondevozon Fense Proxy & VPN Blocker
- CVE-2026-2594Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Titleinc2734 Smart Custom Fields
- CVE-2026-62237Grav < 2.0.4 ReDoS via regex_replace in Sandboxgetgrav grav · getgrav/grav
- CVE-2026-62236grav-plugin-login < 3.8.11 CSRF via regenerate2FASecretgetgrav grav
- CVE-2026-62235Grav Flex-Objects < 1.4.3 Authorization Bypass via APIgetgrav grav
- CVE-2026-62227OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser SnapshotOpenClaw
- CVE-2026-62226OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act RouteOpenClaw
- CVE-2026-62225OpenClaw < 2026.5.18 Authorization Bypass via Skill Command DispatchOpenClaw
- CVE-2026-62224OpenClaw MS Teams < 2026.5.12 Authorization Bypassopenclaw msteams
- CVE-2026-62221OpenClaw 2026.5.12 < 2026.5.26 Authorization Bypass via allowFromOpenClaw
- CVE-2026-62220OpenClaw 2026.2.25 < 2026.5.26 WebSocket Rate Limit BypassOpenClaw
- CVE-2026-62219OpenClaw 2026.2.12 < 2026.5.26 Authorization Bypass via Blank Agent IDsOpenClaw
- CVE-2026-62216OpenClaw 2026.4.20 < 2026.5.28 Policy Bypass via Media UploadOpenClaw
- CVE-2026-62215OpenClaw < 2026.6.5 Authentication Bypass via HTTP CanvasOpenClaw
- CVE-2026-62214OpenClaw < 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validationopenclaw msteams
- CVE-2026-62213OpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requestsopenclaw msteams
- CVE-2026-62212OpenClaw < 2026.5.28 Authentication Bypass via safeFetchOpenClaw
- CVE-2026-62211OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory ExportOpenClaw
- CVE-2026-62210OpenClaw < 2026.6.1 Denial of Service via Remote Media URLsOpenClaw
- CVE-2026-62208OpenClaw < 2026.6.5 Authorization Header Forwarding via SSEOpenClaw
- CVE-2026-62206OpenClaw < 2026.6.9 Authentication Bypass via Moderation ActionsOpenClaw
- CVE-2026-62205OpenClaw 2026.4.12-beta.1 < 2026.6.6 Authorization Bypass via message actionsOpenClaw
- CVE-2026-62201OpenClaw < 2026.6.6 Network Policy Bypass via exec-serverOpenClaw
- CVE-2026-44251Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent messagewazuh
- CVE-2026-51081A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 a
- CVE-2026-51083Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited